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Fault and Event Tree Analyses for Process Systems Risk 
Analysis: Uncertainty Handling Formulations 


Refaul Ferdous,! Faisal Khan,'* Rehan Sadiq,” Paul Amyotte,? and Brian Veitch! 


Quantitative risk analysis (QRA) is a systematic approach for evaluating likelihood, conse- 
quences, and risk of adverse events. QRA based on event (ETA) and fault tree analyses 
(FTA) employs two basic assumptions. The first assumption is related to likelihood values of 
input events, and the second assumption is regarding interdependence among the events (for 
ETA) or basic events (for FTA). Traditionally, FTA and ETA both use crisp probabilities; 
however, to deal with uncertainties, the probability distributions of input event likelihoods 
are assumed. These probability distributions are often hard to come by and even if avail- 
able, they are subject to incompleteness (partial ignorance) and imprecision. Furthermore, 
both FTA and ETA assume that events (or basic events) are independent. In practice, these 
two assumptions are often unrealistic. This article focuses on handling uncertainty ina QRA 
framework of a process system. Fuzzy set theory and evidence theory are used to describe 
the uncertainties in the input event likelihoods. A method based on a dependency coeffi- 
cient is used to express interdependencies of events (or basic events) in ETA and FTA. To 
demonstrate the approach, two case studies are discussed. 


KEY WORDS: Event tree analysis (ETA); fault tree analysis (FTA); interdependence; likelihoods, 
quantitative risk analysis (QRA); uncertainty 
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ABBREVIATIONS 


E Events 
H High 

I Independent 

P Perfectly dependent 
L Low 
E Basic events 
MH Moderately high 
ML Moderately low 

RH Rather high 


S Strong 
VH Very high 
VL Very low 


VS Very strong 
VW Very weak 
DS Dempster & Shafer 
W Weak 
T,F True/false probability 
ETA Event tree analysis 
FTA Fault tree analysis 
PDF Probability density function 
MCS Monte Carlo simulation 
TFN Triangular fuzzy number 


1. INTRODUCTION 


Process systems in chemical engineering are in- 
famous for fugitive emissions, toxic releases, fire and 
explosions, and operation disruptions. These inci- 
dents have considerable potential to cause an acci- 
dent and incur environmental and property damage, 
economic loss, sickness, injury, or death of work- 
ers in the vicinity. Quantitative risk analysis (QRA) 
is a systematic approach that integrates quantita- 
tive information about an incident and provides de- 
tailed analysis that helps to minimize the likelihood 
of occurrence and reduces its adverse consequences. 
QRA for process systems is a difficult task as the 
failures of components and the consequences of an 
incident are randomly varied from process to pro- 
cess. Furthermore, for a process system compris- 
ing thousands of components and steps, it is dif- 
ficult to acquire the quantitative information for 
all components. Finally, the interdependencies of 
various components are not known and are gener- 
ally assumed to be independent for the purpose of 
simplicity. 

Event tree analysis (ETA) and fault tree analysis 
(FTA) are two distinct methods for QRA that de- 
velop a logical relationship among the events leading 
to an accident and estimate the risk associated with 
the accident. The term “event” is frequently used in 


place of the term “accident” in the analyses of fault 
trees and event trees for QRA.® ETA is a technique 
used to describe the consequences of an event (initi- 
ating event) and estimate the likelihoods (frequency) 
of possible outcomes of the event. FTA represents 
basic causes of occurrence of an unwanted event and 
estimates the likelihood (probability) as well as the 
contribution of different causes leading to the un- 
wanted event. In FTA, the basic causes are termed 
basic events, and the unwanted event is called the top 
event.6-® Kumamoto and Henley”) provide a de- 
tailed description of fault tree development and anal- 
ysis for a process system. 

In the event tree, the unwanted event is named as 
an initiating event, and the follow-up consequences 
are termed as events or safety barriers.) The ETA 
represents the dichotomous conditions (e.g., success/ 
failure, true/false, or yes/no) of the initiating event 
until the subsequent events lead to the final out- 
come events.°-!) AIChE®) and Lees” provide a 
detailed procedure for constructing and analyzing 
the ETA for a process system. 

Event and fault trees help to conduct the QRA 
for process systems based on two major assump- 
tions.@ First, the likelihood of events or basic events 
is assumed to be exact and precisely known, which 
is not very often true due to inherent uncertainties 
in data collection and defining the relationships of 
events or basic events.@°!2) Moreover, because of 
variant failure modes, design faults, and poor under- 
standing of failure mechanisms, as well as the vague- 
ness of system phenomena, it is often difficult to pre- 
dict the acquired probability of basic events/events 
precisely.) Second, the interdependencies of events 
or basic events in an event tree or fault tree are 
assumed to be independent, which is often an inaccu- 
rate assumption.) These two assumptions indeed 
misrepresent the actual process system behaviors 
and impart two different types of the uncertainty, 
namely, data uncertainty and dependency uncertainty, 
while performing the QRA using FTA and ETA. 
In an attempt to circumvent the data uncertainty in 
risk analysis, a number of research works !:!0-13.5—23) 
have been developed to facilitate the accommoda- 
tion of expert judgment/knowledge in quantification 
of the likelihood of the basic events/events for QRA. 
Sadiq et al.,"”) Ferson et al.,“) and Li?) proposed 
methods to describe the dependency uncertainty 
among the basic events/events. 

Fuzzy-based and evidence-theory-based formu- 
lations have been proposed and developed to ad- 
dress data and dependency uncertainties in FTA and 
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ETA. The interdependencies among the events (or 
basic events) are described by incorporating a de- 
pendency coefficient into the fuzzy- and evidence- 
theory-based formulations for FTA/ETA. Expert 
judgment/knowledge can be used to quantify the 
unknown or partially known likelihood and depen- 
dency coefficient of the events (or basic events). 


2. FTA AND ETA IN PROCESS SYSTEMS 


The traditional fault and event trees can be an- 
alyzed either deterministically or probabilistically. 
The deterministic approach uses the crisp probability 
of events (or basic events) and determines the prob- 
ability of the top event and the frequency of outcome 
events in the fault and event trees, respectively. The 
probabilistic approach treats the crisp probability as 
a random variable and describes uncertainty using 
probability density functions (PDF).@°2073) Tradi- 
tionally, the probabilistic approach uses Monte Carlo 
simulation (MCS) to address the random uncertainty 
in the inputs (i.e., probability of basic events or 
events) and propagate the uncertainty for the out- 
puts.’ The PDFs for the inputs can be derived 
from historical information, but are often rare, espe- 
cially when the process system comprises thousands 
of components.(!®) 

With an assumption that the events (or basic 
events) are independent, deterministic and proba- 
bilistic approaches use the equations in Table I to 
analyze the fault and event trees. P; denotes the 
probability of ith (i = 1, 2, 3,...,n) events (or 
basic events), Por and Panp, respectively, denote 
the “OR” and “AND” gate operations, and à; de- 
notes the frequency for the initiating event and the 
outcome events. 

Two examples—an event tree for “LPG release” 
(Fig. 1) and a fault tree for “runaway reaction” 
(Fig. 2)—are considered to illustrate the use of deter- 


Table I. Equations Used in Traditional Fault Tree Analyses and 
Event Tree Analyses 





QRA Method Equation 
n 
ETA =ax[[P 
i=1 
n 
FTA Por=1-][G-A) 
i=1 
n 
PAND = I] P 
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ministic and probabilistic approaches in QRA for the 
process system. The event and fault trees for these 
two examples were earlier studied, respectively, in 
Lees“) and Skelton.® The deterministic approach 
provides a quick analysis if the probabilities are 
known accurately.“°) Based on assigned probabili- 
ties (Fig. 1 and Table II), the frequency of outcome 
events for “liquefied petroleum gas (LPG) release 
event tree” and the probability of top event for “run- 
away reaction fault tree” are calculated as crisp val- 
ues (Table III). In the probabilistic approach, trian- 
gular PDFs are assumed to perform MCS (N = 5,000 
iterations) and the PDFs for the outcome events’ fre- 
quency and the top event probability are determined 
based on this assumption. The 90% confidence inter- 
vals for the outcome events of the “LPG event tree” 
and top event of “runaway reaction fault tree” are 
summarized in Table IV and Fig. 3, respectively. 


3. UNCERTAINTY IN FTA AND ETA 


FTA and ETA require probability data of events 
(or basic events) as inputs to conduct a compre- 
hensive QRA for a process system. Since most of 
the time the crisp data as well as PDFs are rarely 
available for all events and basic events, experts’ 
judgment/knowledge are often employed as an al- 
ternative to the objective data.) Two types of un- 
certainties, namely, aleatory and epistemic uncertain- 
ties, are usually addressed while using the expert’s 
knowledge in QRA.@°?778) Aleatory uncertainty is a 
natural variation, randomness, or heterogeneity of a 
physical system. It can be well described using prob- 
abilistic methods if enough experimental data are 
available to support the analysis.2°) Epistemic un- 
certainty means ambiguity and vagueness, ignorance, 
knowledge deficiency, or imprecision in system 
behaviors. 

In QRA, it is important to characterize, repre- 
sent, and propagate the uncertainty accurately in or- 
der to get a reliable analysis. However, when the 
input PDFs are “reasonably known,” MCS can be 
used to estimate and propagate the uncertainties, 
especially two dimensional MCS, which can effec- 
tively deal with both aleatory and epistemic uncertain- 
ties (not discussed here).©° If knowledge is limited 
for definition of the PDFs, probabilistic approaches 
might not be the best choice to handle the uncer- 
tainty in QRA.@ In addition, the independence as- 
sumption of events (or basic events) might be conve- 
nient to simplify the FTA or ETA; however, it is not 
always true for all cases.) This assumption in fact is 
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Large LPG Ignition Explosion Wind to DAP | Delayed explosion Outcomes 
release (IE) Œ) (Œ) (Es) at DAP (E4) 
P2=0.1 Vapor cloud 
Ps A (Independent of 
wind direction) 
Ps B Fireball 
Fig. 1. Event tree for LPG release. 4=0.68x 10 (1-P2)=0.9 






Events/Yr 


(1-P))=0.1 


Cooling failure 


Fig. 2. Fault tree for runaway reaction in 
a reactor. 


Table II. Basic Events Causing the Runaway Reaction 





Probability of 
Symbol Basic-Event Basic Event 
BE; Pump fails 0.2 
BE. Line block 0.01 
BE3 No cooling water 0.1 
BE4 Low coolant flow 0.01 
BEs High temp 0.01 
BE6 Dump valve fails 0.001 





Vapor cloud 
7 C (Dependent on 
wind direction) 


Y 


D LPG vapor 


(1-P4)=0.1 (From DAP source) 








P, E LPG vapor 


(1-P3)=0.6 (From release point) 


Runaway reaction 
N-4) 


Protective system 


(N-3) inoperative (N-2) 


Trips fail 


adding other kind of uncertainty, that is, the depen- 
dency uncertainty, during the analyses. Vesely et al.) 
show several cases of FTA where the independent 
assumptions of basic events are not valid. 

Fuzzy set and evidence theories have recently 
been used in many engineering applications where 
expert knowledge is employed as an alternative to 
crisp data or PDFs.“!77378.2932) Fuzzy set theory 
is used to address the subjectivity in expert judg- 
ment, whereas the evidence theory is more promptly 
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Table III. Deterministic Results for Fault Tree Analyses and Event Tree Analyses 





LPG release event tree 


Runaway reaction fault tree Probability of top event 


Frequency of outcome events (Events/Yr) A B C D E 


6.1E-06 5.5E-05 2.4E-06 4.1E-06 


PTop = 3.16E-04 


2.7E-07 





Table IV. Frequency Determination of Outcome Events Using 
Monte Carlo Simulation 





90% Confidence Interval 


Outcome Lower Bound Upper Bound Median 
Events (5th Percentile) (95th Percentile) (50th Percentile) 
A 1.958E-06 1.024E-05 6.100E-06 

B 4.935E-05 6.090E-05 5.512E-05 

C 7.353E-07 4.151E-06 2.443E-06 

D 3.057E-10 5.467E-07 2.736E-07 

E 1.300E-06 6.850E-06 4.080E-06 





employed in handling the uncertainty that arises due 
to ignorance, conflict, and incomplete information. 
In addition, to describe the dependency uncertainty 
among the basic events in FTA, Ferson et al.4) de- 
scribed the Frank copula and Frechet’s limit. For 
known dependency, the Pearson correlation in the 
Frank copula describes the full range of depen- 
dencies; that is, from perfect dependence to oppo- 
site dependence.“”) Li®) proposed a dependency 
factor-based fuzzy approach to address the depen- 
dencies in performing risk analysis. Li® uses fuzzy 
numbers to define the dependency factor among 
basic events. 





al 
ron 





Probability 
S 
wn 


> 
P 


0.0000 0.0000424 0.0001 0.0001306 


Top event probability 








0.00020.0002309 


In this article, the probabilities of events (or basic 
events) and their dependency coefficients are treated 
as fuzzy numbers or basic probability assignments 
(bpas), which are derived through expert knowl- 
edge. Fuzzy set and evidence theories along with de- 
pendency coefficients, are used to explore the data 
and dependency uncertainty in ETA/FTA. The fuzzy 
numbers in fuzzy set theory describe linguistic and 
subjective uncertainty while bpas in evidence theory 
are used to handle ignorance, incompleteness, and in- 
consistency in expert knowledge. A generic frame- 
work is shown in Fig. 4 illustrating the use of fuzzy 
set theory and evidence theory to handle two differ- 
ent kinds of uncertainties in FTA and ETA. The fol- 
lowing sections describe the fuzzy set theory and the 
evidence theory with respect to handling uncertain- 
ties. 


4. FUZZY SET THEORY 


Zadeh? introduced fuzzy sets, which have re- 
cently been applied where probability theory alone 
was found insufficient to represent all types of un- 
certainties. Fuzzy set theory is flexible in describing 
linguistic terms as fuzzy sets, hedges, predicates, and 
quantifiers.°4) Fuzzy set theory is an extension of 


Mean 0.0001366 
StDev 0.00005728 
N 5000 


Fig. 3. 90% confidence interval for top 
event probability. 
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Identification 
Initiating event, precursor events for event tree and 
the top event, basic events for the fault tree 






Fault tree development 


Develop failure logic 
Use “AND” and “OR” gates 
Proceed down to basic events 


Event tree development 


Develop the consequence of initiating event 


Use Success/Failure or True/False condition 


Propagate the event’s consequence to the outcome events 


| Uncertainty analysis in FTA or ETA 


Uncertainty categorization to clarify the events’ or basic events’ probability 


Uncertainty handling in 
FTA and ETA 


| Subjective knowledge 


e Linguistic uncertainty 
e Subjective uncertainty 


Fuzzy-based approach 


e Defining the occurrence probability and the 
interdependencies of event/ basic events with 
fuzzy number 


e Determining the fuzzy numbers of the 
outcome events and the top event 

e Defuzzifying the outcome events’ frequency 
and the top event’s probability 


Quantitative Analysis 


Incomplete expert knowledge | 
e Incomplete information 
e Expert’s ignorance & conflicts 


Evidential-based approach 


e Define the frame of discernment 
e Assign bpas to define the occurrence probability 


and interdependencies of events/ basic events 


e Knowledge aggregation to clarify the occurrence and 


interdependencies of events/ basic events 


e Belief and bet estimate for the outcome events and 





the top event 


Quantitative evaluation 


Estimates the likelihood of the output parameters for 
FTA and ETA (i.e., outcome events and top-event) 


Fig. 4. Framework for fault tree analyses and event tree analyses under uncertainty. 


traditional set theory, which represents imprecise 
values as fuzzy numbers and characterizes the un- 
certainty using a continuous membership function 


(u). 


4.1. Fundamentals 


Fuzzy numbers are used to describe the vague- 
ness and subjectivity in expert judgment through a 
relationship between the uncertain quantity p (e.g., 
event or basic event probability) and a member- 
ship function u that may range between 0 and 1. 
Any shape of a fuzzy number is possible, but the 
selected shape should be justified by available in- 
formation (but it should be normal, bounded, and 


convex). Generally, triangular or trapezoidal fuzzy 
numbers (TFN or ZFN) are used for representing lin- 
guistic variables.(8-21-35.36) In this study, we used tri- 
angular fuzzy numbers (TFN) in which the fuzzy in- 
tervals are derived using a-cuts. Fig. 5 shows a TFN 
in which fuzzy intervals are estimated using Equation 
(1). The values pr, Pm, and pr below represent the 
minimum, most likely, and maximum values, respec- 
tively, in an interval P,: 


Pa =[pi+a(pm— PL), pR—-O(pR—Pm)|. (1) 


Fuzzy set theory uses the fuzzy arithmetic opera- 
tions based on a-cut formulation to manipulate fuzzy 
numbers.437-38) Traditional fuzzy arithmetic oper- 
ations assume that the events (or basic events) are 
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0.8 


0.6 
Hp a-cut level 
OES ccc 






0.2 


0 0.35 PL Pm 


pr 0.55 1 
TFN of events probability 


Fig. 5. Triangular fuzzy numberto represent the probability of 
events (or basic events). 


independent and use equations in Table V for FTA 
and ETA.(15-21.23.37) 


4.2. Fuzzy-Based Approach for FTA/ETA 


In the proposed fuzzy-based approach, the prob- 
ability of events (or basic events) can be defined 
linguistically and described using TFN. The interde- 
pendence of events (or basic events) is defined lin- 
early using a dependency coefficient (Cz) that can 
also be described using a TFN. Fuzzy probability 
and dependency coefficients are used to determine 
the probability of top event and the frequency of 
outcome events in fuzzy terms. The fuzzy-based ap- 
proach comprises the following three steps: 


(1) Definition of input probability and depen- 
dency coefficient using TFN. 

(2) Determination of likelihood of outcome 
events (ETA) and top event (FTA) as a TFN. 

(3) Defuzzification. 


Ferdous et al. 


4.2.1. Definition of Input Probability and 
Dependency Coefficient Using TFN 


Experts are more comfortable using linguistic ex- 
pression rather than numerical judgment when they 
are asked to define an uncertain quantity like the 
probability of occurrence of events (or basic events) 
and dependency coefficients.?*) In order to capture 
these linguistic expressions, eight linguistic grades 
are defined in the proposed approach (Fig. 6). They 
include: Very Highly (VH), Very Low (VL), Moder- 
ately High (MH), Moderately Low (ML), Low (L), 
Moderate (M), High (H), and Rather High (RH). 
These grades can be used to assign the probability 
of events (or basic events) for ETA (or FTA). 

As mentioned earlier, the traditional methods of 
FTA and ETA assume that the events in an event 
tree and the basic events in a fault tree are indepen- 
dent. However, in practice, the interdependencies 
among the events (or basic events) could be ranged 
from perfectly dependent to oppositely dependent. A 
scalar quantity € [+1, —1] may describe the depen- 
dency between two events, where the scalar quantity 
+1 refers to perfect dependence and —1 refers to op- 
posite dependence.“*) More specifically, the positive 
dependence belongs to an interval [0, +1], whereas 
the negative dependence belongs to an interval [—1, 
0]. However, various levels of dependency are pos- 
sible in between the events (or basic events). This 
work explores only the positive dependence of events 
(or basic events) at each node in FTA (or ETA). Six 
linguistic grades are used in this study to describe 
the different levels of interdependencies among the 
events and basic events, which include: Perfectly De- 
pendent (P), Very Strong (VS), Strong (S), Weak 
(W), Very Weak (VW), and Independent (1). The left 
bound (Cy,) and the right bound (Car) in Table VI 


Method Operation a-Cut Formulation 
n 
ETA Frequency estimation Ai = AX I] (PFL PiR) 
n oz n 
Pı x P2 p} = | | rfu: pk = [ [pfr 
E T Table V. Traditional a-Cut-Based Fuzzy 
Ži + P PL = D)_ Pir PR= D Dir Arithmetic Operations 
i=l i 
n n 
FTA “OR” gate pi =1-[][0- ph); pk =1-[ [0 — phe) 
i=l i=1 
n n 
“AND” gate i= I] PL PR = I] PiR 
i=1 i=1 
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10 VL L M RH H MH VH 
Fig. 6. Mapping linguistic grades for fault 0.5 
tree analyses and event tree analyses. 
0.0 
0 0.045 0.05 0.1 0.15 0.35 04 0.5 0.55 0.6 0.65 0.8560.9 0.95 0.955 
Maximum 
Linguistic Minimum Bound 
Grade Description (Caz) (Cau) 
Table VI. Scale to Categorize the P Perfect dependence between the events 1.000 1.000 
Interdependence Among the Basic VS Very strong dependence, but not fully dependent 0.800 0.995 
Events/Events S Strong dependence, but not too strong 0.450 0.850 
wW Weak dependence, but not too weak 0.150 0.500 
VW Very weak dependence, but not fully independent 0.005 0.200 
I Perfect independence between the events 0.000 0.000 





are representing the TFNs boundary for the depen- 
dency coefficients. 


4.2.2. Determination of Likelihood of Outcome 
Event and Top Event as a TFN 


The dependency coefficient C4 defines the de- 
pendence of the events (or basic events) at each node 
of a fault and event tree (Table VI). The modified 
fuzzy arithmetic with the empirical relation for FTA 
and ETA are described in Table VII, where Cy ~ 1 
refers to perfect dependence and C4 ~ 0 refers to 
complete independence among the event (or basic 
events). 


4.2.3. Defuzzification 


Defuzzification transforms the fuzzy number 
into a crisp value.6®”) The crisp value is useful in eval- 
uating the rank of outcome events’ frequency for 
ETA and calculating the contribution of basic events 
leading to the top event FTA. A number of defuzzi- 
fication methods, including max membership prin- 
ciple, centroid method, weighted average method, 
mean max membership, center of sums, center of 
largest area, and first (or last) of maxima, are avail- 
able in the literature.©°-*) The weighted average 
method is comparatively easy and computationally 
efficient to implement.°**) The following equation 
for the weighted average method is used to defuzzify 


the obtained fuzzy numbers for the event tree and 


fault tree outputs:¢) 


Yo ur(P)- P 


ee 
Yo ur(P) 


(2) 


5. EVIDENCE THEORY (EVIDENTIAL 
REASONING) 


Multisource knowledge can provide more reli- 
able information about the probability of events (or 
basic events) than a single source. Knowledge can 
never be absolute as it is socially constructed and ne- 
gotiated and often suffers incompleteness and con- 
flict.¢2) Evidence theory has alternatively been used 
in many applications, especially when the uncertainty 
is due to ignorance and incomplete knowledge.@34) 
The main advantages of evidence theory are: 


(1) Individual belief, including complete igno- 
rance, can be assigned. 

(2) An interval probability can be obtained for 
each uncertain parameter. 

(3) Multisource information can be combined 
that helps to avoid bias due to some specific 
source.) 


5.1. Fundamentals 


Evidence theory was first proposed by Demp- 
ster and later extended by Shafer. This theory is 
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PiL)] x PSL 





Pt r)| X Pir 
pi= {1 —(1— pf,) x [1 —(1—Cq,) x P5)} 
} 
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a-Cut Formulation 


Table VII. Modified a-Cut-Based Fuzzy 
Arithmetic Operations 


pe = {l= @= Ptk) x [1= = CSR) « pee 


Method Operation 
n 
ETA Frequency estimation Ai =À x I] (Dit; Pir) 
i=1 
Py x Py pi = 1-0 - Cip) 
PR = [1 - (1 — Cir) 
FTA P,“OR” P2 
P, “AND” Ď2 


also known as Dempster-Shafer Theory (DST).@*4) 
DST uses three basic parameters, that is, basic prob- 
ability assignment (bpa), belief measure (Bel), and 
plausibility measure (PI) to characterize the uncer- 
tainty in a belief structure.°?*°°) The belief struc- 
ture represents a continuous interval [belief, plausi- 
bility] for the uncertain quantities in which the true 
probability may lie. Narrow belief structures are rep- 
resentative of more precise probabilities. The main 
contribution of DST is a scheme for the aggregation 
of multisource knowledge based on individual de- 
grees of belief. 


5.1.1. Frame of Discernment (FOD) 


FOD X is defined as a set of mutually exclusive 
elements that allows having a total of 2'*! subsets in a 
power set (P), where |Q| is the cardinality of an FOD. 
For example, if Q = {T, F}, then the power set (P) 
includes four subsets, that is, {® (a null set), {T}, {F}, 
and {T, F}}, as the cardinality is two. 


5.1.2. Basic Probability Assignment 


The bpa, also known as belief mass, is denoted by 
m(p;). The bpa represents the portion of total knowl- 
edge assigned to the proposition of the power set (P) 
such that the sum of the proposition is 1. The focal 
elements, that is, pi © P with m(p;) > 0, collectively 
represent the evidence. The bpa can be characterized 
by the following equation: 


m(pi) > [0,1]; m(®) > 0; 


Y m(pi) = 1. (3) 


piCP 


For example, suppose an expert reports that the 
occurrence probability of an event in ETA is 80% 
true and 10% false. For this example, the baps of 
every subset of m(p;) can be written as m(T) = 0.8, 
and m(F) = 0.1. The unassigned bpa is referred to 


py = {[1- A - Cy) x pty] x PS} 
P= {[1— (1 — Cir) x Pipl x Pr} 


the set m(Q) = m(T, F) = 0.1. This is because, the 
unassigned bpa is taken as ignorance, which is usu- 
ally represented by the subset m{Q}.) 


5.1.3. Belief Measure 


The belief (Bel) measure, sometimes termed as 
the lower bound for a set p;, is defined as the sum 
of all the bpas of the proper subsets px of the set of 
interest p;, that is, p C p;. The relationship between 
bpa and belief measure is written as: 


Bel(p:) = $ mpa). (4) 
PrSPi 
The belief measures in the above example are 
given by: 
Bel(T) = m(T) = 0.8;  Bel(F) = m(F) = 0.1 
and 


Bel(T, F) = m(T) + m(F) + m(T, F) = 1.0. 


5.1.4. Plausibility Measure 


The upper bound, that is, the plausibility (Pl) 
measure, for a set p; is the summation of bpas of the 
sets px that intersect with the set of interest p;, that 
is, pk N pi # ®. Therefore, the relationship can be 
written as: 


Pl(pi)= >> m(px)- (5) 
PRODI FP 


The plausibility measures for the above example 
are given by: 


PI(T) = m(T) + m(T, F) = 0.8 + 0.01 = 0.9; 


PI(F) = m(F) + m(T, F) = 0.14+0.1=0.2; and 
PI(T, F) = 1.0. 
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5.1.5. Rule of Combination for Inference 


The combination rules allow aggregating the in- 
dividual beliefs of experts and provide a combined 
belief structure. The Dempster & Shafer (DS) com- 
bination rule is the fundamental for all combina- 
tion rules. Many modifications of the DS rule of 
combination have been reported. The most common 
modifications include those by Yager, Smets, Ina- 
gaki, Dubois and Prade, Zhang, Murphy, and more 
recently by Dezert and Smarandache.) Detailed 
discussions on these rules can be found in Dezert 
and Smarandache.“”) In this study, DS and Yager 
combination rules are discussed in detail and used 
in developing the evidence-theory-based approach 
for FTA and ETA. DS combination rule: The DS 
combination rule uses a normalizing factor (1—k) to 
develop an agreement among the acquired knowl- 
edge from multiple sources, and ignores all conflict- 
ing evidence through normalization. Assuming that 
the knowledge sources are independent, this combi- 
nation rule uses the AND-type operator (product) 
for aggregation.“>) For example, if the mı (pa) and 
m (pp) are two sets of evidence for the same event 
collected from two different experts, the DS combi- 
nation rule uses the following relation to combine the 
evidence: 





0 for pj = ® 
molp) =} J mPa) x m2(po) 
aM Pb=p; 
PaN Po= pj — for p, # ® 
(6) 


In the above equation, 7-2 (p:i) denotes the 
combined knowledge of two experts for the event, 
and k measures the degree of conflict between the two 
experts, which is determined by the factor k: 


k= ` m(pa) x (pr). (7) 


PaO Po=P 


Yager combination rule: Zadeh in 19848) 
pointed out that the DS combination rule yields 
counterintuitive results and exhibits numerical in- 
stability if conflict is large among the sources.) 
To resolve this issue, Yager in 1987“) proposed an 
extension, which is similar to the DS combination 
rule except that it does not allow normalization of 
joint evidence with the normalizing factor (1—k). The 
total degree of conflict (k) is assigned to be part of 
ignorance Q.) However, in a non- (or less) conflict- 
ing case, the Yager combination rule exhibits similar 
results as the DS combination rule. For high conflict 


Table VIII. Determination of Belief Structure of an Event Using 
Different Combination Rules 





{T} {F} {T, F} 

mı m2 0.60 0.30 0.10 
{T} 0.80 {T} = 0.48 {®} = 0.24 {T} = 0.08 
{F} 0.10 {®} = 0.06 {F} = 0.03 {F} = 0.01 
{T, F} 0.10 {T} = 0.06 {F} = 0.03 {T, F} = 0.01 
k 0.30 

XO m(pa)m(ps) 0.62 0.07 0.01 
Pa Pb=Pi 
m4_2 (DS) 0.89 0.1 0.014 
mı-2 (Yager) 0.62 0.07 0.31 

Belief Structure 

Rules of 
Combination Bel (T) PI (T) Bel (F) PI (F) 
DS rule 0.89 0.90 0.10 0.11 


Yager rule 0.62 0.93 0.07 0.38 


cases (i.e., higher k value), it provides more stable 


and robust results than the DS combination rule: 


m-2(pi) = 
0 for Pi = @® 
» m (Pa) x ™2( Pb) for pi #2 
PaO Pb=Pi s 
5 m (Pa) X (pp) +k for pi = Q 
PaO Pb=Pi (8) 


In the above example, if we assume another 
expert reports new evidence for the same event: 
m ({T}) = 0.6, m ({F}) = 0.3 and m ({T, F}) = 
0.1. Both bodies of evidence are combined using 
DS and Yager combination rules. The aggrega- 
tion of the knowledge is performed using Equa- 
tions (6) and (8). Equations (3) and (4) are used 
to obtain the combined belief structure of the event 
(Table VIII ). 


5.2. Evidence Theory-Based Approach 
for FTA/ETA 


Expert knowledge is used to define the proba- 
bility of occurrence and dependency coefficient of 
events (or basic events). Each expert may have their 
own belief or knowledge that may be incomplete and 
that may be in conflict with the others. In an ev- 
idential reasoning framework, the ignorance in an 
evidence is assigned to a subset m(Q). The con- 
flict among the sources is dealt with using combina- 
tion rules as discussed above. The following sections 
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describe the steps of the evidence-theory-based ap- 
proach to analyze the event tree/fault tree under un- 
certainties. 


5.2.1. Definition of FODs 


Three different FODs for three uncertain quan- 
tities in FTA and ETA, including the probability of 
events, the probability of basic events, and the de- 
pendency coefficient (C4), are used to acquire the be- 
lief masses from different experts. The subsets for the 
FODs are generated based on the cardinality of each 
FOD (Q). 

Traditionally, the consequences of events in 
ETA are dichotomous, that is, {T} and {F}. There- 
fore, the FOD for ETA is defined as Q {T, F}, which 
leads to four subsets in a power set (P) that includes 
{®, {T}, {F}, {T, FH- 

The operational state of a system is usually de- 
fined on the basis of evaluating the success (S) or fail- 
ure (F) state of basic components.@>°) Hence, the 
occurrence probability of a basic event in FTA can 
be described using the FOD Q = {S, F}. As the car- 
dinality is two for the FOD, the power set (P) of each 
event comprises four subsets, which includes {®, {S}, 
{F}, {S, F}}. 

Six qualitative grades of dependency are cate- 
gorized in this study to describe interdependences 
through dependency coefficients for FTA or ETA. 
The notations of these grades are: Independent (I); 
Very Weak (M); Weak (W); Strong (S); Very Strong 
(VS); and Perfect dependence (P). The FOD for this 
case consists of six cardinal elements, which is repre- 
sented by Q = {P, VS, S W, VW, I}. 


5.2.2. Assignment of bpas to Basic Events/Events 


The bpas or belief masses for the events (or ba- 
sic events) and the dependency coefficients (C4) are 
elicited using the experts’ knowledge. Assuming that 
the knowledge sources are independent, the bpas are 


Ferdous et al. 


assigned to particular subsets of each FOD. How- 
ever, for the dependency coefficient, experts’ knowl- 
edge is collected only for the subsets {P}, {VS}, {S}, 
{W}, {VW}, {I}, and {Q}. The bpas for each subset 
individually represent the degree of belief of each ex- 
pert, and implicitly, it represents the total evidences 
that support the probability of occurrence of an event 
(or a basic event) and a dependency coefficient (Cz). 


5.2.3. Belief Structure and Bet Estimation 


The combination rules allow merging the knowl- 
edge from different sources as coherent evidence. 
These rules help to account for ignorance in knowl- 
edge and resolve conflicts among the sources. The 
DS (Equation (6)) or Yager (Equation (8)) combi- 
nation rules are used in this study to aggregate col- 
lected knowledge from different sources. Equations 
(4) and (5) are then used to derive the belief and 
plausibility measure for the probability and depen- 
dency coefficients of events (or basic events). The 
belief and plausibility measure for six kinds of de- 
pendencies (in each node of FTA or ETA) are nor- 
malized to attain a generalized belief structure. Infor- 
mation in Table VI, which represents the belief and 
plausibility for each kind of dependency, is used for 
normalizing the belief structure of dependency coef- 
ficient for each node. Subsequently, equations shown 
in Table IX are used to estimate the likelihoods of 
outcome events and top event for the ETA and FTA, 
respectively. 

“Bet” provides a point estimate in belief struc- 
ture (similar to defuzzification), which is often used 
to represent the crisp value of the final events. It is 
estimated based on the following equation: 


Bet(P) = Y PO. (9) 


pep |Pil 





where |p;| is the cardinality in the set p;. For example, 
the “Bet” estimate for the belief structure obtained 





Method Operation 


n 

ETA Frequency Ai =AX I] [Bel(P;), PI(P;)] 
estimation i=1 

P x P 


FTA P “OR” P 


Formulation 


Bel( Pow) = [1 — {(1 — Bel(Ca)} x {(1 — Bel(P,)}] x Bel( P») 
PI( Pour) = [1 — {(1 — PI(Ca)} x {0 — PLP) }] x PIP) 
Bel( Pow) = 1 — {(1 — Bel(P,)} x [{1 — (1 — Bel(Ca)} x Bel(P2)] 


Table IX. Equations to Analyze the 
Event and Fault Trees 


PI( Pout) = 1 — {(1 — PI(P)} x [{1 — (1 = PL(Ca)} x PIR) 


P\“AND” P, 


Bel( Pow) = [1 — {(1 — Bel(Ca)} x {(1 — Bel(P,)}] x Bel(P:) 


PIP) = [1 — [0 — PCa} x {0 — PIP) x PUPS) 
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using the DS combination rule is calculated as: 
mT)  mT,F) 0.89 0.01 
Eo a g 


The denominators “1” and “2” represent the car- 
dinality in the respective subsets. 


= 0.895. 





Bet( Pr) = 


6. APPLICATION OF DEVELOPED 
APPROACHES 


The same examples (“LPG release event tree” 
and “runaway reaction fault tree”) discussed earlier 
in Section 2 are studied in detail here using both 
fuzzy-based and evidence theory-based approaches. 


6.1. LPG Release—Event Tree Analysis 
6.1.1. Fuzzy-Based Approach 


The revised event tree with fuzzy probabilities is 
illustrated in Fig. 7. In the fuzzy-based approach, the 


Large LPG Ignition 
release (IE) (Ei) 






1=0.68%107 


Fig. 7. Event tree with fuzzy linguistic event/yr 


grades. 


1.0 


Fig. 8. Triangular fuzzy numbers of Mp 
outcome event “A” with “strong” Si 
dependency. 0.5 


0.0 
0.045 


probability of events (or basic events) and their de- 
pendency coefficients (C4) are defined using TFNs. 
The frequency for the outcome events are then esti- 
mated using the a-cut-based fuzzy formulations de- 
veloped in Table VII. For example, the path lead- 
ing to the outcome event “A” is followed by the 
two events. The probability and the coefficient of de- 
pendency (C4) of these two events are linguistically 
expressed, which are, respectively, assumed to be 
“Moderately Low (ML),” “Moderately High (MH),” 
and “Strong (S).” The assigned linguistic expressions 
for these two events are converted into TFNs (based 
on Fig. 6 and Table VI). The TFN for the outcome 
event “A” (shown in Fig. 8) is derived using the em- 
pirical equations described in Table VII. Using nu- 
merous trials for event dependency at each node of 
the LPG event tree, the uncertainty ranges (i.e., fuzzy 
interval) for the outcome event “A” are estimated 
(shown in Fig. 9). It can be observed that the uncer- 
tainty ranges are varied according to the change of 
event dependency at each node of the event tree. 


Explosion 
Œ) 


Wind to DAP | Delayed explosion 


Œ) at DAP (E) Outcomes 





ML Vapor cloud 
Ps A (Independent of 
wind direction) 


Ps B Fireball 


Vapor cloud 
Pı C (Dependent on 
wind direction) 


LPG vapor 
(From DAP 
source) 


P, D 


Py E LPG vapor 


H (From release 
point) 
A= Pig X Poa MH 


RSS 
Se S 
SNS SS S 
o o o 
E 


0.15 0.46 


0.76 0.85 0.955 
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6.1.2. Evidence-Theory-Based Approach 


To demonstrate the evidence-theory-based ap- 
proach, experts’ knowledge from two unbiased and 
independent sources is considered for determining 
the probability as well as the dependency coefficients 
of events for ETA. The elicited knowledge from the 
sources is shown in Tables X (a) and X(b). 

DS and Yager combination rules are used to ag- 
gregate and determine the belief structures of proba- 





5.10E-05 
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-'W' Dependency 


Fig. 9. Uncertainty in outcome event’s 
frequency “A.” 


6.10E-05 = 7.10E-05 


bility and dependency coefficients of events for the 
ETA. Table XI lists the belief structures of events 
and dependency coefficients for the LPG release 
event tree (Fig. 1). These belief structures and the 
equations in Table IX are used to derive the belief 
structures for the outcome events of LPG release. 
Two different kinds of dependence, that is, indepen- 
dent and dependent, are considered while estimat- 
ing the belief structures for the outcome events. The 


Table X. Experts’ Knowledge on (a) the Probability of Events 








Expert 1 (m1) Expert 2 (m2) 
Symbol Events’ Name {T} {F} {T, F} {T} {F} {T, F} 
E; Ignition 0.80 0.10 0.10 0.60 0.30 0.10 
E2 Explosion 0.10 0.80 0.10 0.05 0.80 0.15 
E3 Wind to DAP 0.60 0.20 0.20 0.50 0.40 0.10 
E4 Ignition Explosion at DAP 0.85 0.10 0.05 0.80 0.10 0.10 
(b) Interdependence of Events at Different Nodes 
Number of Experts Node (N) {P} {VS} {S} {W} {VW) {I} {2} 
Expert 1 (mz) N-1 0.15 0.00 0.30 0.10 0.00 0.00 0.45 
N-2 0.00 0.30 0.20 0.00 0.10 0.00 0.40 
N-3 0.40 0.00 0.20 0.00 0.00 0.20 0.20 
N-4 0.50 0.20 0.00 0.00 0.00 0.20 0.10 
Expert 2 (m2) N-1 0.30 0.00 0.20 0.15 0.00 0.00 0.35 
N-2 0.20 0.30 0.00 0.00 0.00 0.15 0.35 
N-3 0.00 0.20 0.40 0.00 0.20 0.00 0.20 
N-4 0.00 0.30 0.40 0.00 0.20 0.00 0.10 
N-1 0.30 0.00 0.20 0.15 0.00 0.00 0.35 
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Table XI. Belief Structures for the Probability and Interdependence of Events 













































































DS Rule of Combination Yager Rule of Combination 
Reference in the Event Tree Bel PI Bel Pl 
Ei T 0.8857 0.9000 0.6200 0.9300 
F 0.1000 0.1143 0.0700 0.3800 
E2 T 0.0284 0.0455 0.0250 0.1600 
F 0.9545 0.9716 0.8400 0.9750 
E3 T 0.6970 0.7273 0.4600 0.8200 
F 0.2727 0.3030 0.1800 0.5400 
E4 T 0.9641 0.9701 0.8050 0.9750 
F 0.0299 0.0359 0.0250 0.1950 
*N-1 0.2549 0.7450 0.1605 0.8395 
N-2 0.2755 0.7245 0.1526 0.8474 
N-3 0.3150 0.6849 0.0769 0.9230 
N-4 0.4013 0.5987 0.0512 0.9488 
P VS S W VW I 
N-1 Bel 0.305 0.000 0.334 0.154 0.000 0.000 
PI 0.511 0.207 0.541 0.361 0.207 0.207 
Bel(C (0.305 x 1 + 0 x 0.80 + 0.334 x 0.45 + 0.154 x 0.15 + 0 x 0.005 + 0 x 0) as 
eCa) (0.305 + 0 x 0.80 + 0.334 x 0.45 + 0.154 x 0.15 + O x 0.005) + (0.551 + 0.207 x 0.995 + 0.541 x 0.85 + 0.361 x 0.5 + 0.207 x 0.2) ` 
PACs) (0.511 x 1 + 0.207 x 0.995 + 0.541 x 0.85 + 0.361 x 0.5 + 0.207 x 0.2 + 0 x 0.207) aes 
g (0.305 + 0 x 0.80 + 0.334 x 0.45 + 0.154 x 0.15 + 0 x 0.005) + (0.551 + 0.207 x 0.995 + 0.541 x 0.85 + 0.361 x 0.5 + 0.207 x 0.2) ` 
“Normalization of belief structure at N-1 for DS rule of combination. 
T = true; F = false. 
Interdependence of Events 
Independent Dependent 
Belief Structures Belief Structures 
(DS Rule of (Yager Rule of 
Table XII. Outcome Events Frequency Outcome Combination) Combination) 
for Two Kinds of Interdependence Events Bel Pl Bet Bel Pl Bet 
of Events 
A 1.054E-06 1.012E-05 *5.586E-06 1.153E-06 1.076E-05 5.958E-06 
B 3.541E-05  6.166E-05 4.854E-05  3.873E-05 6.559E-05 5.216E-05 
C 1.763E-06 2.066E-05 1.121E-05 6.186E-06 6.556E-05 3.587E-05 
D 5.474E-08 4.132E-06 2.093E-06 1.921E-07 1.311E-05 6.652E-06 
E 8.568E-07 1.395E-05 7.405E-06 1.733E-06 3.497E-05 1.835E-05 
“Belief structure of outcome event “A” is [1.054E-06, 1.012E-05]. So, m (T) = 1.054E-06, 
and m(T, F) = 9.064E-06 
T) , m(T,F 1.054E-06 | 9.064E-06 
Bet(A) = {P 4 mCP) _ LOS4E-06 | 9064-06 _ 5 586E-06 
results are presented in Table XII. An order of mag- The difference of using the DS and Yager com- 
nitude difference is observed in the “Bet” estimation bination rules is shown in Fig. 10. In the figure, differ- 
for the outcome event “E.” This difference signifies ent kinds of dependencies are labeled on the x-axis. 
the importance of defining the dependency relation- The belief and plausibility measure for each kind of 


ships in ETA. dependency is plotted on the y-axis. The minimum 
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Yager rule of combination 


1.400E-05 
E PB) 
E Bel(A) 


1.200E-05 
1.000E-05 
8.000E-06 


6.000E-06 


Belief structure 


4.000E-06 


2.000E-06 


0.000E+00 


Interdepence of events 


and maximum values presented in Table VI are con- 
sidered as the belief structure of dependency coeffi- 
cient for each kind of dependency. The shaded areas 
in Fig. 10 represent the belief and plausibility mea- 
sures for the outcome event “A.” These areas show 
that the Yager combination rule measures a large be- 
lief structure in comparison to the DS combination 
rule. Hence, an interpretation can be made that the 
Yager combination rule yields more conservative re- 
sults (i.e., a larger belief structure) in the context of 
existing high conflicts in the sources. 
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Fig. 10. Belief structure representing the 
frequency for outcome event “A.” 





6.2. Runaway Reaction—FTA 
6.2.1. Fuzzy-Based Approach 


To demonstrate the fuzzy-based approach for 
FTA, the probability of basic events and their de- 
pendencies are defined using expert linguistic expres- 
sions. The linguistic expressions are converted into 
TFNs. The linguistic expressions and the correspond- 
ing TFNs are given in Table XIII. A total of seven 
different trials and the fuzzy arithmetic operations 
(described in Table VII) are used to evaluate the 
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Table XIII. Expert’s Knowledge on the Probability of 
Basic Events 





Event Linguistic Variable TFNs 

BE; L (0.1, 0.25, 0.4) 
BE? VL (0, 0.025, 0.05) 
BE3 ML (0.045, 0.0975, 0.15) 
BE, VL (0, 0.025, 0.05) 
BEs VL (0, 0.025, 0.05) 
BE6 VL (0, 0.025, 0.05) 





TFN for the top event. The trials are categorized 
based on different assumptions of dependencies at 
each node of the fault tree. The TFNs of the top 
event for the different trials are shown in Fig. 11. 
In trial 7, when perfect dependencies are assumed, 
the top event probability bears the maximum uncer- 


Dependency of basic events in 
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tainty. Contrary to trial 1, when the events are as- 
sumed independent, the top event probability bears 
the smallest uncertainty. 


6.2.2. Evidence-Theory-Based Approach 


The fault tree for the runaway reaction as shown 
in Fig. 2 is studied to demonstrate the application of 
evidence-theory-based approach in FTA. The proba- 
bility of basic events and the dependency coefficients 
for the fault tree are obtained from two indepen- 
dent sources. Tables X(b) and XTV show the experts’ 
knowledge for defining the probability and depen- 
dency coefficients of basic events for the FTA. 

DS and Yager combination rules are used to 
aggregate the knowledge and estimate the belief 
structures for the basic events and dependency co- 
efficients. The belief structure of the top event is 


TFNs of top event 








different nodes (N) probability 
Trials (T) N-1 N-2 N-3 N-4 (PL Pm PR) 
1 I I I I (0, 0.013, 0.027) 
2 VW VW VW VW (0, 0.061, 0.122) 
3 W W W W (0, 0.122, 0.244) 
4 VS S W W (0, 0.121, 0.243) 
5 S S S S (0, 0.179, 0.359) 
6 VS VS VS VS (0, 0.199, 0.399) 
7 P P P P (0, 0.200, 0.400) 
1 \ en 
Fig. 11. Uncertainty representation for : / KN z T1 
top event using different trials. 09 / ? / 4 á \ ne ee 
0.8 A k SON — —T5 
7” NOY ee oa 
0.7 ; Le \ XY s a 
N \N + 
> 06 L se ` ~ ts 
; 0.5 to \ S *s 
2 7% ` SOO 
P o4 r 4 \ N ` 
7 ei 
03 / L : Yo k 
a + \ N Se 
0.2 4 ` \ a 
N ri 
oid y \ \ ` 
0 a A = 
0.000 0.050 0.100 0.150 0.200 0.250 0.300 0.350 0.400 
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Table XIV. Multisource Knowledge for the Probability of 
Basic Events 





Expert 1 (mı) Expert 2 (m) 


Basic Event {F} {S} {SF} {F} {S} {SF} 


BE; 0.150 0.750 0.100 0.250 0.650 0.100 
BE? 0.020 0.800 0.180 0.015 0.900 0.085 
BE3 0.200 0.700 0.100 0.100 0.800 0.100 
BE, 0.015 0.950 0.035 0.025 0.950 0.025 
BEs 0.015 0.900 0.085 0.010 0.980 0.010 
BE6 0.002 0.950 0.048 0.001 0.940 0.059 





S = success; F = failure. 


then calculated by using the equations in Table IX. 
Table XV shows the belief structure and the “Bet” 
estimate of the top event for two combination rules. 
A total of seven trials are performed using different 
assumptions of interdependence between the basic 
events. The belief structure for each kind of depen- 
dence is defined in Table VI. Table XV indicates that 
the uncertainty in calculating the belief structure and 
“Bet” estimate varies accordingly with the change of 
interdependence at different nodes. 


7. UNCERTAINTY-BASED FORMULATIONS 
FOR FTA AND ETA: A COMPARISON 


The level of uncertainty associated with a system 
is proportional to its complexity, which arises as 
a result of vaguely known relationships among 
various entities, and randomness in the mechanisms 
governing the domain. Sadiq et al. described com- 
plex systems such as environmental, sociopolitical, 
engineering, or economic systems, which involve 
human interventions, and where vast arrays of 
inputs and outputs could not all possibly be captured 


Ferdous et al. 


analytically or controlled in any conventional sense. 
Moreover, relationships between causes and effects 
in these systems are often not well understood 
but can be expressed empirically. Typical complex 
systems consist of numerous interacting factors or 
concepts. These systems are highly nonlinear in 
behavior and the combined effects of contributing 
factors are often subadditive or superadditive. The 
modeling of complex dynamic systems requires 
methods that combine human knowledge and expe- 
rience as well as expert judgment. When significant 
historical data exist, model-free methods such as ar- 
tificial neural networks (ANN) can provide insights 
into cause-effect relationships and uncertainties 
through learning from data. But, if historical data 
are scarce and/or available information is ambigu- 
ous and imprecise, soft computing techniques can 
provide an appropriate framework to handle such 
relationships and uncertainties. Such techniques 
include probabilistic and evidential reasoning 
(Dempster-Shafer Theory), fuzzy logic, and evo- 
lutionary algorithms.©°) Table XVI provides a 
qualitative comparison between five soft computing 
techniques, including ANN, decision trees (DT), 
fuzzy rule-based models (FRBM), Bayesian net- 
works (BN), and cognitive maps/fuzzy cognitive 
maps (CM/FCM). Central to this comparison is an 
assessment of how each technique treats inherent 
uncertainties and its ability to handle interacting 
factors that encompass issues specific to engineering 
systems. ©°) 

Qualitative and quantitative comparisons have 
been performed in this section to investigate the 
features and uncertainty handling abilities of dif- 
ferent tools and the proposed approaches for FTA 
and ETA. The qualitative comparison presented in 
Table XVII illustrates that most of the tools such 


Table XV. Belief Structures and “Bet” Estimations of Top Event for Different Trails 





Dependency of Basic Events 


at Different Nodes 

Trials (T) N-1 N-2 N-3 N-4 Bel 

1 I I I I 3.440E-05 
2 VW VW VW VW 3.595E-05 
3 W W W W 9.650E-05 
4 VS S WwW wW 1.998E-04 
5 S S S S 2.506E-04 
6 VS VS VS VS 3.167E-04 
7 P P P P 2.000E-04 


Belief Structure of Top Event’s Probability 


DS Rule Yager Rule 
PI Bet Bel PI Bet 

6.234E-04 3.289E-04 2.579E-05 3.942E-03 1.984E-03 
3.865E-02 1.934E-02 2.721E-05 1.133E-01 5.666E-02 
8.294E-02 4.152E-02 8.555E-05 2.441E-01 1.221E-01 
8.292E-02 4.156E-02 1.772E-04 2.483E-01 1.242E-01 
1.151E-01 5.768E-02 2.440E-04 3.458E-01 1.730E-01 
1.222E-01 6.126E-02 3.160E-04 3.718E-01 1.860E-01 
1.224E-01 6.130E-02 2.000E-04 3.725E-01 1.864E-01 





P = perfect dependence; VS = very strong; S = strong; W = weak; VW = very weak; I = independent. 


Fault and Event Tree Analyses for Process Systems Risk Analysis 103 


Table XVI. Comparison of Various 
Techniques for Complex Systems 





Soft Computing Techniques 





Fuzzy Cognitive 
Rule- Artificial Maps/Fuzzy 
Decision Based Neural Bayesian Cognitive 

Attributes Tree Models Networks Networks Maps 

Network capability N? LP N H° VH 

Ability to express causality H M N H VH 

Formulation transparency H H Ne H VH 

Ease in model H M M M VH 
development 

Ability to model complex M H VH H VH 
systems 

Ability to handle H H N H VH 
qualitative inputs 

Scalability and modularity VL L vii H VHE 

Data requirements H L VH M Lh 

Difficulty in modification VH H M L N 

Interpretability of results VH VH VH VH H 

Learning/training H Mİ VHi Hk H! 
capability 

Time required for L L H L L 
simulation 

Maturity of science VH H H VH M 

Ability to handle dynamic L H H H M 
data 

Examples of hybrid H VH™ VH™ H H” 


models (ability to 
combine with other 
approaches) 





Ratings: N = no or negligible; VL = very low; L = low; M = medium; H = high; VH = 
very high. 

*Structure is hierarchical. 

bDimensionality is a major problem and formulation becomes complicated for network 
systems. 

Can manage networks but cannot handle feedback loops; therefore referred to as directed 
acyclic graphs (DAG). 

4Can handle feedback loops. 

“Generally, referred to as black-box models. 

TANN needs to be retrained for new set of conditions. 

Very easy to expand because algorithm is in the form of matrix algebra. 

hMinimal data requirement because causal relationships are generally soft in nature. 
‘Clustering techniques, e.g., fuzzy C-means. 

j Algorithms, e.g., Hebbian learning. 

K Algorithms, e.g., evolutionary algorithms and Markov chain Monte Carlo. 

'Training algorithms are available, which have been successful in training ANNs. 
™Examples are available in the literature to develop models using hybrid techniques, e.g., 
neuro-fuzzy models. 

"Has a potential to be used with other soft techniques. 


as Relex V7.7,09 RAM Commander 7.762, and 
PROFAT®?) are unable to handle dependency un- 
certainty. Except for PROFAT, the other tools can- 
not handle subjective uncertainty in the fault and 
event trees for a system. PROFAT®?) is a fuzzy- 
based tool that can handle subjective uncertainty; 
however, it fails to account for epistemic uncertainty 


owing to ignorance or incompleteness of an expert’s 
knowledge. 

Another type of uncertainty arises due to lack 
of information on dependencies among events. 
Traditional FTA uses a default assumption of 
“independence” among the risk events to determine 
the joint probability (risk) of a parent event. This 
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RAM PROFAT 
Relax Commander (Khan and Proposed 

Uncertainty v7.76ba 7.7622 Abbasi, 1999)©3) Approach Table XVII. Qualitative Comparisons of 
Proposed Approach with Available Fault 

Subjective (fuzzy-based) NCP NC C Tree Analyses/Event Tree Analyses 

Incompleteness (evidence based) NC NC C Tools 

Dependency NC NC C 





a A commercial software. 
bNot considered. 
°Considered. 


assumption simplifies the analysis, but may not be 
very realistic. The relationship between risk events 
may be positively or negatively correlated (or in- 
dependent). In the case of two independent events 
X and Y, the joint probability of their conjunction 
is simply a product of their individual probabili- 
ties.>1® There exist many different methods to ex- 
press correlation (dependence) but the Frank model 
(copula) is the most common. 

Simple dependency coefficient-based empirical 
relations (similar to Li approach?*)) embedded 
within the proposed approach can concurrently han- 
dle the dependency uncertainty in FTA and ETA. 
The proposed approach successfully accounts for the 
subjective uncertainty using a membership function 
and evaluates the uncertainty range as a fuzzy in- 
terval. The evidence-theory-based approach can de- 
scribe the epistemic and aleatory uncertainties in ex- 


perts’ knowledge using bpa and is able to provide a 
measure of uncertainty using belief structures. 

Relax V7.7°) and RAM Commander 7.7”) are 
two useful tools for reliability and safety engineer- 
ing. The probability of top event for the “runaway 
reaction fault tree” and the frequency of outcome 
events for the “LPG release event tree” have been 
analyzed using these tools for the same input (Fig. 1 
and Table II). Results (Table XVIII) show that by in- 
troducing 10% uncertainty into the input data, these 
two tools accumulated about 19% and 9% of uncer- 
tainty on the calculated top event’s probability and 
outcome event’s frequency of “B.” The original in- 
put data (Fig. 1 and Table II) are reduced by 10% 
to introduce the uncertainty into the analysis. The 
traditional (probabilistic) methods used predefined 
PDFs to describe the uncertainty in the input data 
(i.e., the probability of basic events or events in FTA 


Table XVIII. Quantitative Comparison of Fault Tree Analyses/Event Tree Analyses Tools 





Determination of Probability of Top Event for “Runaway Reaction Fault Tree” 


Commercial Packages 


Relex V7.76)) RAM Commander 7.7) 
No 10% No 10% 
Uncertainty Uncertainty Uncertainty Uncertainty 
3.16E-04 2.55E-04 3.41E-04 2.74E-04 


Evidence-Theory-Based 


Fuzzy-Based Defuzzified Value Bet Estimation 


No 10% No 10% 
Uncertainty Uncertainty Uncertainty Uncertainty 
8.71E-03 8.76E-03 3.16E-04 2.86E-04 





Determination of Frequency of Outcome Events for LPG Release 


Relex V7.7, RAM Commander 
7.76152) 


Outcome Events No Uncertainty 10% Uncertainty 


Fuzzy-Based Defuzzified Value 


No Uncertainty 


Evidence-Theory-Based Bet 
Estimation 
No Uncertainty 


10% Uncertainty 10% Uncertainty 


A 6.12E-06 4.95E-06 5.98E-06 5.99E-06 6.12E-06 8.36E-06 
B 5.51E-05 5.01E-05 5.54E-05 5.54E-05 5.51E-05 5.05E-05 
C 2.45E-06 3.76E-06 1.50E-06 1.58E-06 2.45E-06 3.60E-06 
D 2.72E-07 8.84E-07 1.62E-07 1.71E-07 2.72E-07 6.64E-07 
E 4.08E-06 8.27E-06 4.97E-06 4.98E-06 4.08E-06 5.79E-06 
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or ETA). When the crisp data or the PDFs for the 
input data are not known or limited (a very common 
situation in process systems), the FTA or ETA are 
highly dependent on expert knowledge. In these situ- 
ations, traditional tools and probabilistic approaches 
are not helpful. This makes the FTA/ETA less 
credible. Both fuzzy set theory and evidence the- 
ory are not limited by availability of detailed data. 
The results using both approaches are presented in 
Table XVIII. An expert knowledge and assumption 
of independence among events (or basic events) are 
used in calculating the top event probability and out- 
come events frequency. In fuzzy-based approach, the 
uncertainty is assigned using the membership func- 
tion. The TFNs corresponding to 90% membership 
are considered as input data for the analysis. In 
evidence-theory-based approach, the uncertainty is 
allocated through the unassigned mass (as ignorance) 
of the power set. For the 10% uncertainty in the ba- 
sic event probabilities, the evidence-theory-based ap- 
proach estimates about 9% and 8% uncertainties in 
the response, that is, [2.55 x 1074, 3.16 x 1074] and 
[4.46 x 1075, 5.63 x 1075], respectively. Similarly, the 
fuzzy-based approach measures less than 1% uncer- 
tainty results in the response (top event’s probabil- 
ity as well as outcome event’s frequency “B.”) with 
corresponding fuzzy intervals of [7.38 x 107°, 1.01 x 
10-7] and [5.47 x 1075, 5.60 x 1075]. 


8. RESULTS AND DISCUSSIONS 


Two types of uncertainty, namely, data uncer- 
tainty and dependency uncertainty, were explored. 
Expert knowledge in terms of fuzzy linguistic grades 
and bpas was used instead of assigning the likelihood 
and interdependencies of basic events/events as crisp 
probabilities for FTA/ETA. The dependency coeffi- 
cient in each node of the fault tree and event tree 
addressed the dependency uncertainty and described 
the relationships among the basic events/events. 


Fuzzy linguistic grades were assigned to TFNs and 
a-cut-based fuzzy empirical relations of the fuzzy- 
based approach were used to handle the linguistic 
and subjective uncertainty in expert knowledge. For 
multisource knowledge, the incomplete and incon- 
sistent baps were combined by using combination 
rules. The dependency coefficients in evidence- 
theory-based empirical relations were used to de- 
scribe the dependency uncertainty and analyze the 
fault tree and event tree under uncertainty due to in- 
consistent, incomplete, and partial ignorance of mul- 
tisource knowledge. 

The developed approaches were applied to two 
case studies: “LPG release event tree” and “runaway 
reaction fault tree.” The interdependencies among 
the events (or basic events) were varied in each node 
of the fault tree or event tree. The impacts of the in- 
terdependencies were observed so as to understand 
the effects of the dependencies of events (or basic 
events) in FTA/ETA for process systems. For two de- 
pendence cases of basic events/events, independent 
and perfectly dependent, the output results for the 
FTA and ETA are provided in Tables XIX and XX, 
respectively. It can be observed in the first three rows 
of Table XIX that the results remain almost the same. 
However, when dependency was considered (fourth 
row in Table XIX), the results varied by an order of 
magnitude. This highlights the importance of depen- 
dencies in ETA. 

The results in Table XX are inconsistent mainly 
because of different types of uncertainties modeled 
in the different approaches. The perfectly dependent 
case in FTA determines the probability range for the 
top event as [0, 0.400], which is a maximum in com- 
parison to the independent case for representing the 
uncertainty. It can also be observed in Table XX that 
when the basic events are perfectly dependent, the 
point estimate (defuzzified value) of the top event 
exhibits a higher ordered magnitude in compari- 
son to the deterministic approach and MCS-based 





Approach 


Deterministic approach 
MCS-based approach 


Table XIX. Summary of Event Tree 
Analyses Results 


Fuzzy-based approach 


Fuzzy-based approach 


Dependency Frequency of 
of Events Outcome Event “A” 
Independent 6.12E-06 
90% confidence interval Independent  (1.96E-05, 1.02E-04) 
Median 6.10E-06 
Fuzzy interval Independent  (2.60E-06, 9.74E-06) 
Defuzzified value 6.17E-06 
Fuzzy interval Perfectly (5.78E-05, 6.49E-05) 
Defuzzified value dependent 6.14E-05 
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Dependency of 
Approach Basic Events 
Deterministic approach Independent 
MCS-based approach 90% Confidence interval Independent 
Median 
Fuzzy-based approach Fuzzy interval Independent 
Defuzzified value 
Fuzzy-based approach Fuzzy interval Perfectly dependent 


Defuzzified value 


(4.24E-05, 2.31E-04) 


Top Event’s 
Probability (Prop) 


3.16E-04 


Table XX. Summary of Fault Tree 


1.30E-04 Analyses Results 


(0, 2.70E-02) 
1.35E-02 
(0, 4.00E-01) 
2.00E-01 





approach. This confirms the significance of including 
the dependencies of the basic events in FTA. Similar 
observations of using the evidence-theory-based ap- 
proach for FTA/ETA (Tables XII and XV) confirm 
that a reliable and robust result cannot be attained 
without considering the interdependencies of events 
(or basic events). 


9. CONCLUSIONS 


FTA and ETA are two fairly established tech- 
niques; however, the uncertainty in defining the 
probabilities and the relationships of events (or ba- 
sic events) can lead to questionable results for QRA. 
The traditional approaches require the known proba- 
bility and the independence assumption of events (or 
basic events), which are rare and often unrealistic for 
process systems. Two different approaches to handle 
these types of uncertainties in FTA and ETA are de- 
rived in this study by combining expert knowledge 
with fuzzy set theory and evidence theory. The appli- 
cation of these approaches to two different case stud- 
ies shows the proposed approaches are more robust 
to handle the uncertainty in QRA for the process sys- 
tems in the following ways: 


(1) Fuzzy-based approaches and evidence- 
theory-based approaches properly address 
the uncertainties in expert knowledge and an- 
alyze the event trees or fault trees associated 
with different kinds of uncertainties in expert 
knowledge. 

(2) Introduction of a dependency coefficient in 
the fuzzy- and evidence-theory-based ap- 
proaches describes interdependencies among 
the events (or basic events) in a fault 
tree/event tree. 

(3) The proposed approaches can be applied to 
FTA/ETA for any process systems that have 
data and dependency uncertainties. 


Including the negative dependencies of events 
(or basic events), and combining the subjectivity (us- 
ing fuzzy-based approach) and incompleteness (ev- 
idence theory) into a single approach, for example, 
Fuzzy-Dempster-Shafer, may offer additional future 
improvement to the approaches developed here. 


ACKNOWLEDGMENTS 


The authors gratefully acknowledge the finan- 
cial support provided by the Natural Sciences and 
Engineering Research Council of Canada (NSERC) 
through the Strategic Grant Program. 


REFERENCES 


1. Ferdous R, Khan F, Veitch B, Amyotte PR. Methodology for 
computer aided fuzzy fault tree analysis. Process Safety and 
Environmental Protection, 2009; 87(4):217-226. 

2. Spouge J. A Guide to Quantitative Risk Assessment for Off- 
shore Installations. Aberdeen, UK: CMPT Publication, 1999. 

3. Vesely WE, Goldberg FF, Roberts NH, Haas! DF. Fault Tree 
Handbook. Washington, DC: U.S. Nuclear Regulatory Com- 
mission, 1981. 

4. Haasl DF. Advanced concepts in fault tree analysis. In Sys- 
tem Safety Symposium. Seattle, WA, Washington, DC: Boe- 
ing Company, 1965. 

5. Hauptmanns U. Fault tree analysis of a proposed ethylene va- 
porization unit. Industrial & Engineering Chemistry Funda- 
mentals, 1980; 19(3):300-309. 

6. Hauptmanns U. Fault tree analysis for process industries en- 
gineering risk and hazard assessment. Pp. 21-59 in Kandel A, 
Avni E (eds). Engineering Risk & Hazard Assessment, vol. 1. 
Boca Raton, FL: CRC Press, 1988. 

7. Kumamoto H, Henley EJ. Probabilistic Risk Assessment and 
Management for Engineers and Scientists, 2nd ed. New York: 
IEEE, 1996. 

8. AIChE. Guidelines for Chemical Process Quantitative Risk 
Analysis. New York: CCPS of the American Institute of 
Chemical Engineers, 2000. 

9. Andrews JD, Dunnett SJ, Tu L. Event tree analysis using 
binary decision diagrams. IEEE Transactions on Reliability, 
2000; 49(2):230-238. 

10. Ferdous R, Khan F, Sadiq R, Amyotte P, Veitch B. Handling 
data uncertainties in event tree analysis. Process Safety and 
Environmental Protection, 2009; 87(5):283-292. 

11. Mannan MS. Lees’ Loss Prevention in the Process Indus- 
tries: Hazard Identification, Assessment and Control, 3rd ed. 
Burlington: Butterworth-Heinemann, 2005. 


Fault and Event Tree Analyses for Process Systems Risk Analysis 


12. 


13. 


14. 


15. 
16. 


I7: 
18. 
19. 


20. 
21. 


22. 


23. 


24. 


25. 


26. 


27. 


28. 


29. 


30. 


31. 


Sadiq R, Saint-Martin E, Kleiner Y. Predicting risk of water 
quality failures in distribution networks under uncertainties 
using fault-tree analysis. Urban Water Journal, 2008; 5(4):287- 
304. 

Yuhua D, Datao Y. Estimation of failure probability of oil and 
gas transmission pipelines by fuzzy fault tree analysis. Journal 
of Loss Prevention in the Process Industries, 2005; 18(2):83- 
88. 

Ferson S, Hajagos J, Berleant D, Zhang J, Tucker WT, 
Ginzburg L, et al. Dependence in Dempster-Shafer Theory 
and Probability Bounds Analysis.: Sandia National Laborato- 
ries, 2004. 

Tanaka H, Fan LT, Lai FS, Toguchi K. Fault-tree analysis 
by fuzzy probability. IEEE Transactions on Reliability, 1983; 
32(5):453-457. 

Misra KB, Weber GG. Use of fuzzy set theory for level-I stud- 
ies in probabilistic risk assessment. Fuzzy Sets and Systems, 
1990; 37(2):139-160. 

Singer D. A fuzzy set approach to fault tree and reliability 
analysis. Fuzzy Sets and Systems, 1990; 34(2):145-155. 
Kenarangui R. Event-tree analysis by fuzzy probability. IEEE 
Transactions on Reliability, 1991; 40(1):120-124. 

Sawyer JP, Rao SS. Fault tree analysis of fuzzy mechanical sys- 
tems. Microelectronics Reliability, 1994; 34(4):653-667. 
Suresh PV, Babar AK, Raj VV. Uncertainty in fault tree 
analysis: A fuzzy approach. Fuzzy Sets and Systems, 1996; 
83(2):135-141. 

Rivera SS, Barón HH. Using fuzzy arithmetic in contain- 
ment event trees. In International Conference on Probabilistic 
Safety Assessment, Washington, DC, 1999. 

Huang D, Chen T, Wang MJJ. A fuzzy set approach for event 
tree analysis. Fuzzy Sets and Systems, 2001; 118(1):153-165. 
Wilcox RC, Ayyub BM. Uncertainty Modeling of Data and 
Uncertainty Propagation for Risk Studies. Pp. 184-191 in 
ISUMA ’03: Proceedings of the 4th International Symposium 
on Uncertainty Modelling and Analysis. Washington, DC: 
IEEE Computer Society, 2003. 

Li H. Hierarchical Risk Assessment of Water Supply Systems. 
PhD Thesis. Department of Civil and Building Engineering, 
Loughborough University, Loughborough, UK, 2007. 
Abrahamsson M. Uncertainty in Quantitative Risk Analysis— 
Characterisation and Methods of Treatment. Sweden: Lund 
University, Department of Fire Safety Engineering, Report 
No: 1024, 2002. 

Skelton B. Process Safety Analysis: An Introduction. War- 
wickshire, UK: IChemE, 1997. 

Thacker BH, Huyse LJ. Probabilistic assessment on the basis 
of interval data. Journal of Structural Engineering and Me- 
chanics, 2007; 25(3):331-346. 

Ayyub BM, Klir GJ. Uncertainity modeling and analysis in en- 
gineering and the sciences. Pp. 1-381 in Bilal M, Ayyub GJK 
(eds). Uncertainity Modeling and Analysis in Engineering 
and the Sciences. Boca Raton, FL: Chapman and Hall/CRC, 
2006. 

Agarwal H, Renaud JE, Preston EL, Padmanabhan D. Uncer- 
tainty quantification using evidence theory in multidisciplinary 
design optimization. Reliability Engineering & System Safety, 
2004; 85(1-3):281-294. 

Baraldi P, Zio E. A combined Monte Carlo and possibilistic 
approach to uncertainty propagation in event tree analysis. 
Risk Analysis, 2008; 28(5):1309-1326. 

Druschel BR, Ozbek M, Pinder GF. Application of Dempster- 
Shafer theory to hydraulic conductivity. In CMWR—XVI, 
Conference Program, Copenhagen, Denmark, 2006. 


32. 


33. 


34. 


35. 


36. 


37. 


38. 


39. 


40. 


41. 


42. 


43. 


44. 


45. 


46. 


47. 


48. 


49. 


50. 


51. 


32: 


53. 


107 


Bae HR, Grandhi RV, Canfield RA. An approximation ap- 
proach for uncertainty quantification using evidence theory. 
Reliability Engineering & System Safety, 2004; 86(3):215-225. 
Zadeh LA. Fuzzy sets. Information and Control, 1965; 
8(3):338-353. 

Khan FI, Sadiq R. Risk-based prioritization of air pollution 
monitoring using fuzzy synthetic evaluation technique. Envi- 
ronmental Monitoring and Assessment, 2005; 105(1):261-283. 
El-Iraki A, Odoom ER. Fuzzy probist reliability assessment 
of repairable systems. Pp. 96-100 in Conference of the North 
American Fuzzy Information Processing Society—NAFIPS 
(Cat. No.98TH8353), Pensacola Beach, FL: 1998. 

Cheng YL. Uncertainties in fault tree analysis. Tamkang Jour- 
nal of Science and Engineering, 2000; 3(1):23-29. 

Lai FS, Shenoi S, Fan TL. Fuzzy fault tree analysis theory and 
applications. Pp. 117-137 in Kandel A, Avni E (eds). Engi- 
neering Risk & Hazard Assessment, vol. 1. Boca Raton, FL: 
CRC Press, 1988. 

Siler W, Buckley JJ. Fuzzy Expert Systems and Fuzzy Reason- 
ing. Hoboken, NJ: John Wiley & Sons. 2005. 

Klir GJ, Yuan B. Fuzzy Sets and Fuzzy Logic: Theory and Ap- 
plications, 1st ed. Upper Saddle River, NJ: Prentice Hall PTR, 
1995. 

Ross T. Fuzzy Logic with Engineering Applications. New 
York: McGraw-Hill, 1995. 

Ross T. Fuzzy Logic with Engineering Applications, 2nd ed. 
West Sussex, UK: John Wiley & Sons, 2004. 

Ayyub BM. A Practical Guide on Conducting Expert-Opinion 
Elicitation of Probabilities and Consequences for Corps Fa- 
cilities. Alexandria, VA: Institute for Water Resources, IWR 
Report 01-R-1, 2001. 

Sadiq R, Najjaran H, Kleiner Y. Investigating evidential rea- 
soning for the interpretation of microbial water quality in a 
distribution network. Stochastic Environmental Research and 
Risk Assessment, 2006; 21(1):63-73. 

Wang YM, Yang JB, Xu DL, Chin KS. On the combination 
and normalization of interval-valued belief structures. Infor- 
mation Sciences: An International Journal, 2007; 177(5):1230- 
1247. 

Sentz K, Ferson S. Combination of Evidence in Dempster- 
Shafer Theory. Albuquerque, NH: Sandia National Labora- 
tories, Sandia Report No: SAND2002-0835, 2002. 

Lefevre E, Colot O, Vannoorenberghe P. Belief function com- 
bination and conflict management. Information Fusion, 2002; 
3(2):149-162. 

Smarandache F, Dezert J. Proportional conflict redistribution 
rules for information fusion. P. 461 in Applications and Ad- 
vances of DSmT for Information Fusion, vol. 2. Rehoboth, 
MA: American Research Press, 2004. 

Zadeh LA. In Fehling M (ed). Reviews of Books. Pp. 81-83 in 
A Mathematical Theory of Evidence, vol. 5. Menlo Park, CA: 
AI Magazine, 1984. 

Yager RR. On the Dempster-Shafer framework and new com- 
bination rules. Information Science, 1987; 41(2):93-137. 
Sadiq R, Kleiner Y, Rajani B. Proof-of-Concept Model to Pre- 
dict Water Quality Changes in Distribution Pipe Networks (Q- 
WARP). Denver, CO: Water Research Foundation, 2009. 
Relex Reliability Software V7.7. Needham, MA: Relex Soft- 
ware Corporation, 2003. 

Reliability, Availability, Maintainability and Safety Software. 
Israel: Advanced Logistics Development (ALD) Ltd., 2009. 
Khan FI, Abbasi SA. PROFAT: A user friendly system for 
probabilistic fault tree analysis. Process Safety Progress, 1999; 
18(1):42-49. 


